CVE-2021-22670

7.8 highEPSS 1.1%

High (7.8) in fatek fvdesigner. EPSS 1.1% chance of exploitation in the next 30 days.

An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-824
Published: 2021-03-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fatek:fvdesigner

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02
https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02

Check your stack JSON